App. No. 09/858,323 

IN THE CLAIMS: 
The status of the claims is as follows, 
and listings of claims in the application. 

1. 
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This listing of claims replaces all prior versions 



(Currently Amended) An architecture for intercepting and processing packets 
transmitted from a source to a destination over a network, the architecture 
comprising: 

a packet interceptor coupled with said network and operative to selectively 
intercept said packets prior to receipt by said destination based on a first criteria; 

at least one primary processor coupled with said packet interceptor and 
operative to perform stateless processing tasks on said intercepted packets, said 
stateless processing tasks comprising tasks which are not directly dependent on a 
previously intercepted packet, said at least one primary processor including: 

at least two stateless packet processors coupled in 
parallel, said processing of said intercepted packets being distributed 
among said at least two stateless packet processors; 
at least one secondary processor coupled with said at least one primary 
processor and operative to perform stateful processing tasks on said statelessly 
processed intercepted packets, said stateful processing tasks comprising tasks which 
are based at least on a previously intercepted packet, said at least one secondary 
processor including: 

at least two stateful packet processors coupled in 
series with each other, each of said at least two stateful 
packet processors operative to perform a portion of said stateful 
processing tasks on said statelessly processed intercepted packets, a 
last one in said series of said at least two stateful packet processors 
being coupled with said network and operative to selectively release 
said statefullv processed and statelessly processed intercepted packet 
back to said network. 
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2. (Original) The architecture of Claim 1, wherein said network further comprises a bi- 
directional network having an upstream flow and a downstream flow, said 
architecture further comprising at least two of said at least one primary processor and 
at least two of said at least one secondary processor, a first of said at least two 
primary and secondary processors being coupled with said upstream flow and a 
second of said at least two primary and secondary processors being coupled with said 
downstream flow. 

3. (Original) The architecture of Claim 2, wherein said at least two secondary processors 
are capable of sharing state information between each other. 

4. (Original) The architecture of Claim 1, wherein said at least two primary packet 
processors are coupled together and operative to share data. 

5. (Original) The architecture of Claim 4, wherein said at least two primary packet 
processors are coupled together with at least one co-processor. 

6. (Original) The architecture or Claim 5, wherein said co-processor comprises a 
classification co-processor. 

7. (Original) The architecture of Claim 5, wherein said co-processor comprises a content 
addressable memory. 

8. (Original) The architecture of Claim 1 , wherein said at least two secondary packet 
processors are coupled with said at least two primary packet processors and operative 
to share state information. 

9. (Original) The architecture of Claim 1 , wherein said at least two secondary packet 
processors and said at least two primary packet processors comprise network 
processors. 

1 0. (Original) The architecture of Claim 9, wherein said network processor is capable of 
bi-directional operation and characterized by a bi-directional throughput, said 
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architecture comprising utilizing said network processor uni-directionally wherein 
said bi-directional throughput is devoted to uni-directional processing. 

1 1 . (Previously presented) The architecture of Claim 1 , wherein said stateless processing 
tasks comprise filtering said intercepted packets based on a second criteria. 

12. (Original) The architecture of Claim 1, wherein one portion of said stateful processing 
tasks comprises inspection and analysis of said intercepted packets and another 
portion of said stateful processing tasks comprises performing an action on said 
intercepted packets. 

13. (Previously presented) The architecture of Claim 12, wherein said action comprises at 
least one of modifying, deleting, storing information about and releasing said 
intercepted packets. 

14. (Original) The architecture of Claim 1, wherein said packet interceptor is capable of 
interfacing with an optical network. 

15. (Original) The architecture of Claim 14, wherein said optical network is characterized 
by compliance with an OC-48 standard. 

16. (Original) The architecture of Claim 1, wherein said packet interceptor is capable of 
operating substantially at wire speed. 

17. (Original) The architecture of Claim 1, wherein said stateless and stateful processing 
tasks are capable of processing any portion of said intercepted packets. 

18. (Original) The architecture of Claim 1, wherein said packet interceptor is coupled 
with said network via a router. 

19. (Original) The architecture of Claim 1 8, further comprising a router blade including 
said packet interceptor, said at least one primary processor and said at least one 
secondary processor 
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20. (Currently Amended) A method of intercepting and processing packets transmitted 
from a source to a destination over a network, said method comprising: 

(a) intercepting, selectively, said packets prior to receipt by said 
destination based on a first criteria; 

(b) distributing said intercepted packets to at least two primary packet 
processors each operative to perform a stateless processing task on said intercepted 
packets, said stateless processing task comprising a task which is not directly 
dependent on a previously intercepted packet; 

(c) performing said stateless processing task on said distributed said 
intercepted packets in parallel by said at least two stateless packet processors; 

(d) receiving said statelesslv processed intercepted packets from said at 
least two primary packet processors by a first secondary packet processor operative to 
perform a first portion of a stateful packet processing task on said statelesslv 
processed intercepted packets; 

(e) receiving said partially statefiilly processed and statelesslv processed 
intercepted packets from said first secondary packet processor by a second secondary 
packet processor operative to perform a second portion of the stateful processing task 
on said partially statefiilly processed and statelesslv processed intercepted packets, 
said stateful processing task comprising a task which is based at least on a previously 
intercepted packet; and 

(f) releasing, selectively, said statefiilly processed and statelesslv 
processed intercepted packets upon completion of said stateful processing task. 

2 1 . (Original) The method of Claim 20, wherein said network further comprises a bi- 
directional network having an upstream flow and a downstream flow, said method 
further comprising performing (a)-(f) on each of said upstream and downstream flows 
independently. 

22. (Original) The method of Claim 21, further comprising: 

(g) sharing state information between said secondary packet processors of 
said upstream flow and said secondary packet processors of said downstream flow. 
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23. (Original) The method of Claim 20, wherein said at least two primary packet 
processors are coupled together, said method further comprising sharing data between 
said coupled at least two primary packet processors. 

24. (Original) The method of Claim 23, wherein said at least two primary packet 
processors are coupled together with at least one co-processor, said method further 
comprising executing a portion of said stateless processing task by said co-processor. 

25. (Original) The method or Claim 24, wherein said executing further comprises 
executing a portion of said stateless processing task by said co-processor comprising a 
classification co-processor. 

26. (Original) The method of Claim 24, wherein said executing further comprises 
executing a portion of said stateless processing task by said co-processor comprising a 
content addressable memory. 

27. (Original) The method of Claim 20, wherein said at least two secondary packet 
processors are coupled with said at least two primary packet processors, said method 
further comprising sharing state information between said at least two primary packet 
processors and said at least two secondary packet processors. 

28. (Original) The method of Claim 20, wherein said at least two secondary packet 
processors and said at least two primary packet processors comprise network 
processors. 

29. (Original) The method of Claim 28, wherein said network processor is capable of bi- 
directional operation and characterized by a bi-directional throughput, said method 
comprising utilizing said network processor uni-directionally wherein said bi- 
directional throughput is devoted to uni-directional processing. 

30. (Original) The method of Claim 20, wherein said stateless processing task comprises 
filtering said intercepted packets based on a second criteria. 
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3 1 . (Currently Amended) The method of Claim 20, wherein said first portion of said 
stateful processing task comprises inspection and analysis of said statefully processed 
intercepted packets and said second portion of said stateful processing task comprises 
performing an action on said partially statefully processed and statelessly processed 
intercepted packets. 

32. (Currently Amended) The method of Claim 3 1 , wherein said action comprises at least 
one of modifying, deleting, storing information about and releasing said statefully 
processed and statelessly processed intercepted packets. 

33. (Original) The method of Claim 20, where (a) further comprises intercepting said 
packets from an optical network. 

34. (Original) The method of Claim 33, wherein said optical network is characterized by 
compliance with an OC-48 standard. 

35. (Original) The method of Claim 20, said method further comprising performing (a) - 
(f) substantially at wire speed. 

36. (Previously presented) The method of Claim 20, wherein said stateless and stateful 
processing task are capable of processing any portion of said intercepted packets. 

37. (Currently Amended) An apparatus for intercepting and processing packets 
transmitted from a source to a destination over a network, the apparatus comprising: 

means for selectively intercepting said packets prior to receipt by said 
destination based on a first criteria; 

means for performing stateless processing tasks on said intercepted packets, 
said stateless processing tasks comprising tasks which are not directly dependent on a 
previously intercepted packet, said means including: 

parallel processing means for distributing and processing 
said intercepted packets in parallel coupled with said stateless 
processing means; 

means for performing stateful processing tasks on said statelessly processed 
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intercepted packets, said stateful processing tasks comprising tasks which are based at 

least on a previously intercepted packet, said means including: 

serial processing means operative to distribute said stateful 
processing tasks on said statelessly processed intercepted packets and 
selectively release said statefullv processed and statelessly processed 
intercepted packet back to said network. 

38. (Previously presented) An apparatus for intercepting and processing packets 
transmitted from a source to a destination over a network, the apparatus comprising: 

a packet interceptor operative to intercept packets from said network; 

a packet processor coupled with said packet interceptor and operative to 
process said intercepted packets; and 

wherein said packet interceptor is further operative to filter said packets to 
determine which of said packets to intercept based on a first criteria and said packet 
processor is further operative to monitor said intercepted packets for pre-defined 
conditions and at least one of delete, modify and log packets which meet said pre- 
defined conditions. 

39. (Previously presented) The architecture of Claim 2, wherein said previously 
intercepted packet was intercepted from one of said upstream or downstream flow. 

40. (Previously presented) The method of Claim 2 1 , wherein said previously intercepted 
packet was intercepted from one of said upstream or downstream flow. 

41. (Previously presented) The apparatus of claim 37, wherein said network further 
comprises a bi-directional network having an upstream flow and a downstream flow, 
said architecture further comprising at least two of said means for performing 
stateless processing tasks and at least two of said means for performing stateful 
processing tasks, a first of said at least two means for performing stateless processing 
tasks and means for performing stateful processing tasks being coupled with said 
upstream flow and a second of said at least two primary and secondary processors 
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being coupled with said downstream flow, and wherein said previously intercepted 
packet was intercepted from one of said upstream or downstream flow. 
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